Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Eb1dqXkPoX2P26nKpLqvEDsErMU.roa
File: Eb1dqXkPoX2P26nKpLqvEDsErMU.roa (raw, json)
Hash identifier: cq+f5fl4F2IpXkwnTlOBlzB4qmXNyzAYAPH26OOtM88=
Subject key identifier: 11:BD:5D:A9:79:0F:A1:7D:8F:DB:A9:CA:A4:BA:AF:10:3B:04:AC:C5
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 56A6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Eb1dqXkPoX2P26nKpLqvEDsErMU.roa
Signing time: Tue 14 May 2024 02:54:07 +0000
ROA not before: Tue 14 May 2024 02:54:07 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22182 (0x56a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 02:54:07 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=11BD5DA9790FA17D8FDBA9CAA4BAAF103B04ACC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:85:be:09:88:ac:f1:db:23:29:7a:45:59:1e:
c4:94:01:96:1a:a6:85:bd:66:5c:19:d3:4d:58:01:
92:4f:f5:f0:ee:b0:f1:06:35:3a:70:c1:dd:8e:cf:
b1:9f:17:b6:90:c4:8b:99:ec:e6:c2:19:56:4b:8b:
36:75:37:48:7a:45:ed:a4:8f:0d:11:3a:6a:ca:e1:
5f:65:99:3b:65:eb:4a:48:c5:91:32:29:68:08:2c:
ce:d9:f4:19:2c:ae:e4:5d:a4:f2:fc:a4:47:a3:68:
ad:1f:f7:17:5e:57:1e:ea:93:4a:a6:c4:4e:4e:85:
c3:6d:db:17:65:95:97:ea:bc:2a:70:c9:2f:3b:66:
03:1a:71:e5:74:a4:82:32:bb:e4:d7:0e:4d:1c:f6:
c2:44:9d:52:02:11:3e:c0:dd:7e:b1:ba:2d:be:6b:
b7:d6:87:e4:63:3e:29:41:7d:60:37:69:41:eb:1a:
45:fc:0c:c7:2e:2c:79:11:b4:da:94:12:c5:6d:e0:
f8:37:7e:b7:e3:4d:22:2f:66:1a:2b:5e:d5:12:aa:
23:eb:3a:5a:d6:9e:15:2f:1d:8f:05:6b:a1:54:7a:
59:1a:4e:e2:ed:b5:6d:48:b7:82:a7:12:88:74:9a:
20:ef:14:f6:93:3c:d4:de:b8:c5:22:28:70:e5:30:
f1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BD:5D:A9:79:0F:A1:7D:8F:DB:A9:CA:A4:BA:AF:10:3B:04:AC:C5
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Eb1dqXkPoX2P26nKpLqvEDsErMU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
30:88:e2:03:bf:1d:4d:ae:09:9e:f9:cb:18:99:53:71:52:e1:
c5:b3:6b:91:3d:36:65:f7:4b:47:fb:27:04:d6:b9:7a:e5:bc:
a0:61:2f:e1:ae:37:e1:f9:91:35:2f:0b:15:e0:41:fd:1b:34:
ed:5e:b5:d9:cd:23:be:e3:e2:bb:77:83:29:99:37:ee:b7:aa:
ee:bb:06:93:e1:dd:f5:2b:22:92:95:b2:46:be:a0:92:f1:75:
6e:5c:e3:d8:c8:3c:72:8c:f5:cc:d4:33:76:57:a5:2e:0c:1d:
77:af:fe:4a:5c:b9:e4:fb:cb:01:d8:b0:7c:62:af:d6:bd:d4:
9e:6e:ae:c6:d7:12:14:80:0c:9b:1a:88:ec:ef:51:f4:81:94:
f4:0c:92:f6:f5:cd:aa:aa:33:41:81:96:31:69:78:c7:16:f2:
d2:73:55:1f:6f:94:49:a4:31:44:b7:f8:af:e0:70:bb:42:2f:
ee:0f:80:d6:49:a8:ab:95:85:9f:90:36:55:f1:ed:57:cf:62:
40:22:c4:b1:49:ff:6c:f8:54:3f:5d:51:d7:0a:03:c0:16:62:
2b:d1:c5:a8:1a:61:12:d1:44:e0:c2:62:3d:2b:1c:d0:ba:61:
8d:bc:7f:45:72:2e:c1:7d:ab:de:04:5c:67:a8:f9:f1:2f:80:
c6:6e:0e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 08:41:12 2024 by rpki-client on console.sobornost.net